Gentoo cstetex Multiple Vulnerabilities
Secunia Advisory: SA27759
Release Date: 2007-11-26
Last Update: 2007-11-27
Popularity: 3,345 views

Critical:
Moderately critical
Impact: Unknown
Exposure of sensitive information
DoS
System access
Where: From remote
Solution Status: Unpatched

OS:Gentoo Linux 1.x

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2007-0650
CVE-2007-2756
CVE-2007-3387
CVE-2007-3472
CVE-2007-3473
CVE-2007-3474
CVE-2007-3475
CVE-2007-3476
CVE-2007-3477
CVE-2007-3478
CVE-2007-4033
CVE-2007-4352
CVE-2007-5392
CVE-2007-5393
CVE-2007-5935
CVE-2007-5936
CVE-2007-5937


Description:
Gentoo has acknowledged some vulnerabilities in cstetex, where some have unknown impacts and others can be exploited by malicious, local users to disclose and manipulate sensitive information, or by malicious users and malicious people to compromise a vulnerable system.

For more information:
SA26390
SA26862
SA26982
SA27239
SA27686
SA27705

Solution:
The vendor recommends removing the package or migrating to teTeX or TeX Live with its Babel packages.

Provided and/or discovered by:
Reported by the vendor.

Changelog:
2007-11-27: Added CVE references.

Original Advisory:
http://www.gentoo.org/security/en/glsa/glsa-200711-34.xml

Other References:
SA26390:
http://secunia.com/advisories/26390/

SA26862:
http://secunia.com/advisories/26862/

SA26982:
http://secunia.com/advisories/26982/

SA27239:
http://secunia.com/advisories/27239/

SA27686:
http://secunia.com/advisories/27686/

SA27705:
http://secunia.com/advisories/27705/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Microsoft Office Two Code Execution Vulnerabilities // 22 views
2. Microsoft Word Malformed Object Pointer Vulnerability // 21 views
3. phpBB "gen_rand_string()" Predictable RNG Weakness // 15 views
4. 3Com Wireless 8760 Access Point HTTP Request Processing Denial of Service // 13 views
5. Drupal Content Construction Kit Script Insertion Vulnerabilities // 12 views
6. XASTIR Insecure Temporary Files // 10 views
7. QNX Neutrino RTOS Multiple Privilege Escalation Vulnerabilities // 9 views
8. Apple QuickTime Multiple Vulnerabilities // 9 views
9. Sun Java System Web Proxy Server SOCKS Module Buffer Overflows // 9 views
10. phpBB reveals user IPs // 9 views